POPIA Compliance Notice
TradeLens is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This notice explains how we collect, use, store, and protect your personal information.
Responsible Party
TradeLens
Information Officer: Ruane van Heerden
Email: support@tradelens.co.za
Website: tradelens.co.za
Purpose of Processing
We process your personal information for the following lawful purposes:
- To provide you with access to the TradeLens platform and its features
- To manage your account and subscription
- To process payments via PayFast
- To send transactional communications (account confirmation, password reset, billing)
- To generate AI coaching reports from your trading data
- To send alerts and notifications you have configured
- To detect, prevent, and respond to security incidents
- To comply with legal obligations
Lawful Basis for Processing
We process your personal information on the following grounds:
- Contract: processing necessary to provide the service you have subscribed to
- Consent: where you have explicitly agreed to processing (e.g. marketing communications)
- Legitimate interest: security monitoring and fraud prevention
- Legal obligation: where required by South African law
Your Rights Under POPIA
Right of Access
Request a copy of all personal information we hold about you.
Right to Correction
Request correction of inaccurate or incomplete personal information.
Right to Deletion
Request deletion of your personal information, subject to legal obligations.
Right to Object
Object to processing of your personal information in certain circumstances.
Right to Portability
Request your data in a portable format (CSV export available in settings).
Right to Complain
Lodge a complaint with the Information Regulator of South Africa.
How to Exercise Your Rights
To exercise any of your POPIA rights, contact our Information Officer at support@tradelens.co.za. Please include your full name, email address, and a description of your request. We will respond within 30 days. Some requests may require identity verification before processing.
Data Transfers
Your data may be processed outside South Africa by the following third-party service providers, each of whom is bound by appropriate data protection agreements:
- Supabase (USA/EU): database and authentication hosting
- Anthropic (USA): AI coaching report generation
- Zoho (India/EU): transactional email delivery
- Vercel (USA): website and dashboard hosting
Security Measures
- All data encrypted in transit via HTTPS/TLS
- Database row-level security — users access only their own data
- Passwords hashed using industry-standard algorithms
- Multi-factor authentication available
- New device login notifications
- Regular security reviews
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Regulator of South Africa as required under POPIA, within a reasonable time of becoming aware of the breach.
Information Regulator
Information Regulator of South Africa
Website: inforeg.org.za
Email: inforeg@justice.gov.za
You have the right to lodge a complaint with the Information Regulator if you believe your personal information has been processed in violation of POPIA.